Until a safer, saner alternative is available, we're stuck with an insecure, outdated authentication technique. Here's how to make the best of a bad situation while we wait for services to get serious about verifying identities.